Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/2a117ee7-322f-3fb9-aaae-1c614b96e006.roa
File: 2a117ee7-322f-3fb9-aaae-1c614b96e006.roa (raw, json)
Hash identifier: Y94spVvI4rq1FNKmV7/BtpZxsQ7/eVF3e9LsNXd3Lf0=
Subject key identifier: 2B:DB:55:7D:3B:17:0A:E4:A2:53:E0:A9:CE:5E:4D:DE:E4:96:3C:82
Certificate issuer: /CN=f35be5f0-d452-4cd8-859e-27da5839ddb4
Certificate serial: 010D0C9F4328584902EC2D2370B14F5EEDAE1ACA
Authority key identifier: 16:D3:86:F9:79:3B:5D:0D:9C:FD:0F:F3:B5:6F:04:6D:8D:77:58:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/2a117ee7-322f-3fb9-aaae-1c614b96e006.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 63334
IP address blocks: 23.143.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:2d:23:70:b1:4f:5e:ed:ae:1a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f35be5f0-d452-4cd8-859e-27da5839ddb4
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=0b0db3f5-cd61-4a15-90c9-aa5eca193936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:54:2b:5c:95:a7:a8:65:45:22:5e:0f:cd:e9:
40:cf:08:79:04:78:20:53:9d:40:78:e7:ac:6c:52:
c8:7d:46:81:83:6b:33:ad:f1:22:59:27:e2:f1:90:
c3:da:a5:ad:81:19:51:2b:bb:78:98:84:4f:e0:74:
20:81:c1:a0:90:42:0b:84:6d:ab:6d:2c:00:9a:25:
f8:d3:55:26:63:0f:70:cd:87:96:a0:72:d1:58:31:
08:2b:a2:4a:9b:56:e0:53:3d:1c:da:a9:09:02:de:
4a:14:15:70:f0:3b:1b:b4:6d:b1:70:f8:b3:ba:ac:
f6:aa:de:74:76:e6:b1:58:31:ed:a0:73:fa:4a:f9:
d7:2b:e1:c4:e2:ff:80:c8:86:4b:ab:5f:a5:9e:02:
70:c9:b0:78:9c:fb:a1:5d:f6:56:95:9c:cc:a1:b8:
9f:9d:f7:f0:f1:79:53:d0:e5:47:a7:b6:d7:cc:38:
eb:fc:b8:2e:87:78:00:96:8d:87:bc:2f:0f:2d:28:
e9:02:45:43:61:e3:5a:0e:15:5e:47:48:07:44:11:
1d:47:5e:71:4f:ae:43:e7:1b:f3:5a:41:af:02:94:
f0:e2:18:bd:fb:63:8b:f4:81:96:74:14:9c:2f:05:
e0:55:b7:61:fa:ca:17:33:95:e7:44:4f:e6:a4:35:
7b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DB:55:7D:3B:17:0A:E4:A2:53:E0:A9:CE:5E:4D:DE:E4:96:3C:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/2a117ee7-322f-3fb9-aaae-1c614b96e006.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.crl
X509v3 Authority Key Identifier:
keyid:16:D3:86:F9:79:3B:5D:0D:9C:FD:0F:F3:B5:6F:04:6D:8D:77:58:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer
sbgp-ipAddrBlock: critical
IPv4:
23.143.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:2c:96:d8:4a:d2:59:40:dd:43:91:ec:8e:c5:63:20:5b:ec:
ab:9f:4b:15:31:12:4a:29:7b:f4:4e:00:40:44:52:9a:e7:62:
4e:78:3f:ed:f8:f8:84:f7:2a:74:e4:4d:e8:2b:5e:ae:d3:f3:
30:32:1d:35:f6:33:be:ac:3b:eb:b5:e6:fa:74:aa:56:e7:0a:
ea:e4:7a:e3:3c:44:90:a0:b6:2d:59:d6:23:18:fe:5e:0c:b0:
07:d5:c8:2b:87:c8:60:90:fc:1a:d8:ed:dd:ba:ca:a3:12:e6:
9a:1d:48:23:2c:c0:c6:ef:28:55:4c:b7:52:a6:09:84:8d:80:
3d:91:17:b7:d1:fb:88:22:73:bd:88:8c:17:7e:1d:97:65:e0:
3d:be:a7:f7:e5:50:62:11:ac:90:68:1b:1a:18:e3:f2:a7:f2:
58:67:c4:6e:44:08:f9:e2:f8:a8:55:bd:0a:d3:f7:37:60:eb:
50:6b:61:26:76:b9:f0:ee:13:dd:d4:5b:23:8e:21:9b:d1:e0:
d1:95:b3:22:2c:76:b4:3e:b7:44:29:58:91:84:66:64:43:61:
8f:4e:a6:ed:b0:c1:6d:fd:85:58:ed:60:9f:0a:ee:33:13:78:
34:f7:cc:e2:92:0b:38:e1:68:36:c0:a6:50:14:1f:70:46:40:
88:1c:e5:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7C0jcLFPXu2uGsowDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM1YmU1ZjAtZDQ1Mi00Y2Q4LTg1OWUtMjdkYTU4Mzlk
ZGI0MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
MGIwZGIzZjUtY2Q2MS00YTE1LTkwYzktYWE1ZWNhMTkzOTM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1QrXJWnqGVFIl4PzelAzwh5BHggU51AeOes
bFLIfUaBg2szrfEiWSfi8ZDD2qWtgRlRK7t4mIRP4HQggcGgkEILhG2rbSwAmiX4
01UmYw9wzYeWoHLRWDEIK6JKm1bgUz0c2qkJAt5KFBVw8DsbtG2xcPizuqz2qt50
duaxWDHtoHP6SvnXK+HE4v+AyIZLq1+lngJwybB4nPuhXfZWlZzMobifnffw8XlT
0OVHp7bXzDjr/Lguh3gAlo2HvC8PLSjpAkVDYeNaDhVeR0gHRBEdR15xT65D5xvz
WkGvApTw4hi9+2OL9IGWdBScLwXgVbdh+soXM5XnRE/mpDV7QQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCvbVX07FwrkolPgqc5eTd7kljyCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMzVi
ZTVmMC1kNDUyLTRjZDgtODU5ZS0yN2RhNTgzOWRkYjQvMmExMTdlZTctMzIyZi0z
ZmI5LWFhYWUtMWM2MTRiOTZlMDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjM1YmU1ZjAtZDQ1Mi00Y2Q4LTg1
OWUtMjdkYTU4MzlkZGI0L2YzNWJlNWYwLWQ0NTItNGNkOC04NTllLTI3ZGE1ODM5
ZGRiNC5jcmwwHwYDVR0jBBgwFoAUFtOG+Xk7XQ2c/Q/ztW8EbY13WNcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mMzViZTVmMC1kNDUyLTRjZDgtODU5ZS0yN2Rh
NTgzOWRkYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4/YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJsslthK0llA3UOR7I7FYyBb7KufSxUxEkope/ROAEBEUprnYk54P+34
+IT3KnTkTegrXq7T8zAyHTX2M76sO+u15vp0qlbnCurkeuM8RJCgti1Z1iMY/l4M
sAfVyCuHyGCQ/BrY7d26yqMS5podSCMswMbvKFVMt1KmCYSNgD2RF7fR+4gic72I
jBd+HZdl4D2+p/flUGIRrJBoGxoY4/Kn8lhnxG5ECPni+KhVvQrT9zdg61BrYSZ2
ufDuE93UWyOOIZvR4NGVsyIsdrQ+t0QpWJGEZmRDYY9Opu2wwW39hVjtYJ8K7jMT
eDT3zOKSCzjhaDbAplAUH3BGQIgc5f8=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:34:49 2025 by rpki-client